GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-38710 (GCVE-0-2025-38710)

Vulnerability from cvelistv5 – Published: 2025-09-04 15:33 – Updated: 2026-08-05 12:04
VLAI
Title
gfs2: Validate i_depth for exhash directories
Summary
In the Linux kernel, the following vulnerability has been resolved: gfs2: Validate i_depth for exhash directories A fuzzer test introduced corruption that ends up with a depth of 0 in dir_e_read(), causing an undefined shift by 32 at: index = hash >> (32 - dip->i_depth); As calculated in an open-coded way in dir_make_exhash(), the minimum depth for an exhash directory is ilog2(sdp->sd_hash_ptrs) and 0 is invalid as sdp->sd_hash_ptrs is fixed as sdp->bsize / 16 at mount time. So we can avoid the undefined behaviour by checking for depth values lower than the minimum in gfs2_dinode_in(). Values greater than the maximum are already being checked for there. Also switch the calculation in dir_make_exhash() to use ilog2() to clarify how the depth is calculated. Tested with the syzkaller repro.c and xfstests '-g quick'.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 9a0045088d888c9c539c8c626a366cb52c0fbdab , < 076e992752e4b24178918f748d75597c80a408d2 (git)
Affected: 9a0045088d888c9c539c8c626a366cb52c0fbdab , < 366183911b153e9b8cf758e1414e1154d7569337 (git)
Affected: 9a0045088d888c9c539c8c626a366cb52c0fbdab , < 112bb60cd0e254a369e95aa9941a694ffeca089f (git)
Affected: 9a0045088d888c9c539c8c626a366cb52c0fbdab , < cddea0c721106ea480371412d8de21705eb27376 (git)
Affected: 9a0045088d888c9c539c8c626a366cb52c0fbdab , < 53a0249d68a210c16e961b83adfa82f94ee0a53d (git)
Affected: 9a0045088d888c9c539c8c626a366cb52c0fbdab , < b5f46951e62377b6e406fadc18bc3c5bdf1632a7 (git)
Affected: 9a0045088d888c9c539c8c626a366cb52c0fbdab , < 9680c58675b82348ab84d387e4fa727f7587e1a0 (git)
Affected: 9a0045088d888c9c539c8c626a366cb52c0fbdab , < 557c024ca7250bb65ae60f16c02074106c2f197b (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.26
Unaffected: 0 , < 2.6.26 (semver)
Unaffected: 5.10.258 , ≤ 5.10.* (semver)
Unaffected: 5.15.209 , ≤ 5.15.* (semver)
Unaffected: 6.1.175 , ≤ 6.1.* (semver)
Unaffected: 6.6.134 , ≤ 6.6.* (semver)
Unaffected: 6.12.43 , ≤ 6.12.* (semver)
Unaffected: 6.15.11 , ≤ 6.15.* (semver)
Unaffected: 6.16.2 , ≤ 6.16.* (semver)
Unaffected: 6.17 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/gfs2/dir.c",
            "fs/gfs2/glops.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "076e992752e4b24178918f748d75597c80a408d2",
              "status": "affected",
              "version": "9a0045088d888c9c539c8c626a366cb52c0fbdab",
              "versionType": "git"
            },
            {
              "lessThan": "366183911b153e9b8cf758e1414e1154d7569337",
              "status": "affected",
              "version": "9a0045088d888c9c539c8c626a366cb52c0fbdab",
              "versionType": "git"
            },
            {
              "lessThan": "112bb60cd0e254a369e95aa9941a694ffeca089f",
              "status": "affected",
              "version": "9a0045088d888c9c539c8c626a366cb52c0fbdab",
              "versionType": "git"
            },
            {
              "lessThan": "cddea0c721106ea480371412d8de21705eb27376",
              "status": "affected",
              "version": "9a0045088d888c9c539c8c626a366cb52c0fbdab",
              "versionType": "git"
            },
            {
              "lessThan": "53a0249d68a210c16e961b83adfa82f94ee0a53d",
              "status": "affected",
              "version": "9a0045088d888c9c539c8c626a366cb52c0fbdab",
              "versionType": "git"
            },
            {
              "lessThan": "b5f46951e62377b6e406fadc18bc3c5bdf1632a7",
              "status": "affected",
              "version": "9a0045088d888c9c539c8c626a366cb52c0fbdab",
              "versionType": "git"
            },
            {
              "lessThan": "9680c58675b82348ab84d387e4fa727f7587e1a0",
              "status": "affected",
              "version": "9a0045088d888c9c539c8c626a366cb52c0fbdab",
              "versionType": "git"
            },
            {
              "lessThan": "557c024ca7250bb65ae60f16c02074106c2f197b",
              "status": "affected",
              "version": "9a0045088d888c9c539c8c626a366cb52c0fbdab",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/gfs2/dir.c",
            "fs/gfs2/glops.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.26"
            },
            {
              "lessThan": "2.6.26",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.134",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.43",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.15.*",
              "status": "unaffected",
              "version": "6.15.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.16.*",
              "status": "unaffected",
              "version": "6.16.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.17",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "2.6.26",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "2.6.26",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "2.6.26",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.134",
                  "versionStartIncluding": "2.6.26",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.43",
                  "versionStartIncluding": "2.6.26",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15.11",
                  "versionStartIncluding": "2.6.26",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16.2",
                  "versionStartIncluding": "2.6.26",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17",
                  "versionStartIncluding": "2.6.26",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: Validate i_depth for exhash directories\n\nA fuzzer test introduced corruption that ends up with a depth of 0 in\ndir_e_read(), causing an undefined shift by 32 at:\n\n  index = hash \u003e\u003e (32 - dip-\u003ei_depth);\n\nAs calculated in an open-coded way in dir_make_exhash(), the minimum\ndepth for an exhash directory is ilog2(sdp-\u003esd_hash_ptrs) and 0 is\ninvalid as sdp-\u003esd_hash_ptrs is fixed as sdp-\u003ebsize / 16 at mount time.\n\nSo we can avoid the undefined behaviour by checking for depth values\nlower than the minimum in gfs2_dinode_in(). Values greater than the\nmaximum are already being checked for there.\n\nAlso switch the calculation in dir_make_exhash() to use ilog2() to\nclarify how the depth is calculated.\n\nTested with the syzkaller repro.c and xfstests \u0027-g quick\u0027."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The corrupt `di_depth` reaches the kernel only by mounting an attacker-crafted GFS2 volume (loop device, removable media, or a shared cluster LUN), after which the flaw is triggered by ordinary local syscalls (`open`/`stat`/`getdents`) on that mount. GFS2 is a shared-disk filesystem with no network-protocol front end, so there is no remote parser path.\nAC:L - The condition is a deterministic inconsistency the attacker fully authors on disk (`GFS2_DIF_EXHASH` set, `di_depth = 0`, `di_size = 8`), and the out-of-bounds index is chosen exactly by picking a filename whose CRC32 hash equals the desired 32-bit offset. No race, no timing window, and no memory-layout condition outside the attacker\u0027s control.\nPR:L - The bare `mount(2)` needs CAP_SYS_ADMIN (gfs2 lacks FS_USERNS_MOUNT), but in the most severe reasonable deployment an unprivileged user gets the crafted volume mounted through udisks2 loop-setup/removable-media automount or `user`/autofs fstab delegation, and the trigger itself \u2014 a path lookup or `getdents` on the bad directory \u2014 requires only basic unprivileged access to the mount.\nUI:N - In the automount/loop-setup scenario the attacker presents the media and initiates the mount themselves, and at the point of exploitation the out-of-bounds read fires from the attacker\u0027s own `open()`/`stat()` call. No second user has to take any action.\nS:U - The out-of-bounds access, the wild block read, and the hang all occur in GFS2 code inside the kernel\u0027s own security authority. No VM, IOMMU, or sandbox boundary is crossed.\nC:H - `get_leaf_nr()` reads a 64-bit word at `hash + 8*index` where `index` is a fully attacker-chosen 32-bit value and the allocation is 8 bytes \u2014 an unbounded slab out-of-bounds read reaching up to 32 GiB past the object, far beyond a \"few bytes\" bounded read. The value read becomes a block number handed to `gfs2_meta_read()`, giving an observable oracle on kernel heap contents through lookup success/failure and the resulting I/O.\nI:H - Out-of-bounds heap data is promoted to a filesystem block number, and `dir_new_leaf()`/`gfs2_dir_add()` then write directory metadata (`oleaf-\u003elf_next`, `be16_add_cpu(\u0026leaf-\u003elf_entries, 1)`) into the buffer for that attacker-influenced block, so kernel-side data read past the object\u0027s bounds steers subsequent metadata writes to arbitrary blocks of the device \u2014 including a shared cluster LUN.\nA:H - A read up to 32 GiB past an 8-byte slab object will typically strike unmapped memory and produce a kernel oops/page fault (KASAN reports it as slab-out-of-bounds), and `dir_e_read()` independently spins forever because `len` truncates to 0 so `index` never advances, wedging `getdents()` while holding the directory glock and stalling the mount \u2014 a full panic on `panic_on_oops` configurations, repeatable on demand."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:04:10.498Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/076e992752e4b24178918f748d75597c80a408d2"
        },
        {
          "url": "https://git.kernel.org/stable/c/366183911b153e9b8cf758e1414e1154d7569337"
        },
        {
          "url": "https://git.kernel.org/stable/c/112bb60cd0e254a369e95aa9941a694ffeca089f"
        },
        {
          "url": "https://git.kernel.org/stable/c/cddea0c721106ea480371412d8de21705eb27376"
        },
        {
          "url": "https://git.kernel.org/stable/c/53a0249d68a210c16e961b83adfa82f94ee0a53d"
        },
        {
          "url": "https://git.kernel.org/stable/c/b5f46951e62377b6e406fadc18bc3c5bdf1632a7"
        },
        {
          "url": "https://git.kernel.org/stable/c/9680c58675b82348ab84d387e4fa727f7587e1a0"
        },
        {
          "url": "https://git.kernel.org/stable/c/557c024ca7250bb65ae60f16c02074106c2f197b"
        }
      ],
      "title": "gfs2: Validate i_depth for exhash directories",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-38710",
    "datePublished": "2025-09-04T15:33:00.629Z",
    "dateReserved": "2025-04-16T04:51:24.033Z",
    "dateUpdated": "2026-08-05T12:04:10.498Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-38710",
      "date": "2026-09-16",
      "epss": "0.00154",
      "percentile": "0.04973"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-18T14:14:54.000Z",
      "cve": "CVE-2025-38710",
      "id": "msrc_CVE-2025-38710",
      "initial_release_date": "2025-09-02T00:00:00.000Z",
      "product_status:known_affected": "1",
      "product_status:known_not_affected": "2",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "gfs2: Validate i_depth for exhash directories",
      "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-38710.json",
      "version": "4"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-38710\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-09-04T16:15:40.137\",\"lastModified\":\"2026-07-30T06:23:35.970\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ngfs2: Validate i_depth for exhash directories\\n\\nA fuzzer test introduced corruption that ends up with a depth of 0 in\\ndir_e_read(), causing an undefined shift by 32 at:\\n\\n  index = hash \u003e\u003e (32 - dip-\u003ei_depth);\\n\\nAs calculated in an open-coded way in dir_make_exhash(), the minimum\\ndepth for an exhash directory is ilog2(sdp-\u003esd_hash_ptrs) and 0 is\\ninvalid as sdp-\u003esd_hash_ptrs is fixed as sdp-\u003ebsize / 16 at mount time.\\n\\nSo we can avoid the undefined behaviour by checking for depth values\\nlower than the minimum in gfs2_dinode_in(). Values greater than the\\nmaximum are already being checked for there.\\n\\nAlso switch the calculation in dir_make_exhash() to use ilog2() to\\nclarify how the depth is calculated.\\n\\nTested with the syzkaller repro.c and xfstests \u0027-g quick\u0027.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/gfs2/dir.c\",\"fs/gfs2/glops.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"9a0045088d888c9c539c8c626a366cb52c0fbdab\",\"lessThan\":\"076e992752e4b24178918f748d75597c80a408d2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9a0045088d888c9c539c8c626a366cb52c0fbdab\",\"lessThan\":\"366183911b153e9b8cf758e1414e1154d7569337\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9a0045088d888c9c539c8c626a366cb52c0fbdab\",\"lessThan\":\"112bb60cd0e254a369e95aa9941a694ffeca089f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9a0045088d888c9c539c8c626a366cb52c0fbdab\",\"lessThan\":\"cddea0c721106ea480371412d8de21705eb27376\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9a0045088d888c9c539c8c626a366cb52c0fbdab\",\"lessThan\":\"53a0249d68a210c16e961b83adfa82f94ee0a53d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9a0045088d888c9c539c8c626a366cb52c0fbdab\",\"lessThan\":\"b5f46951e62377b6e406fadc18bc3c5bdf1632a7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9a0045088d888c9c539c8c626a366cb52c0fbdab\",\"lessThan\":\"9680c58675b82348ab84d387e4fa727f7587e1a0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9a0045088d888c9c539c8c626a366cb52c0fbdab\",\"lessThan\":\"557c024ca7250bb65ae60f16c02074106c2f197b\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/gfs2/dir.c\",\"fs/gfs2/glops.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.26\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.26\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.258\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.209\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.175\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.134\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.43\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.15.11\",\"lessThanOrEqual\":\"6.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.16.2\",\"lessThanOrEqual\":\"6.16.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.17\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.12.43\",\"matchCriteriaId\":\"1936DB45-ECC5-4A1A-A924-0D4E14DFE578\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.15.11\",\"matchCriteriaId\":\"BC242347-F722-43AE-B910-BE0B22386977\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.16\",\"versionEndExcluding\":\"6.16.2\",\"matchCriteriaId\":\"BD7C087D-2415-4521-B624-30003352F899\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/076e992752e4b24178918f748d75597c80a408d2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/112bb60cd0e254a369e95aa9941a694ffeca089f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/366183911b153e9b8cf758e1414e1154d7569337\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/53a0249d68a210c16e961b83adfa82f94ee0a53d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/557c024ca7250bb65ae60f16c02074106c2f197b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9680c58675b82348ab84d387e4fa727f7587e1a0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b5f46951e62377b6e406fadc18bc3c5bdf1632a7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cddea0c721106ea480371412d8de21705eb27376\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-30T08:59:14+00:00",
      "cve": "CVE-2025-38710",
      "id": "CVE-2025-38710",
      "initial_release_date": "2025-09-04T00:00:00+00:00",
      "product_status:known_affected": "198",
      "product_status:known_not_affected": "76",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: gfs2: Validate i_depth for exhash directories",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-38710.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-28T16:59:17Z",
      "cve": "CVE-2025-38710",
      "id": "CVE-2025-38710",
      "initial_release_date": "2025-09-04T23:23:33Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "397",
      "product_status:known_not_affected": "490",
      "product_status:recommended": "247",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-38710",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-38710.json",
      "version": "44"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.